$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5686d275-7655-3c09-9ac1-b87e7f1c2b80.roa File: 5686d275-7655-3c09-9ac1-b87e7f1c2b80.roa (raw, json) Hash identifier: mJulifHMa+ycZ7pW57/zbVFDUwealjWTd2FoDguPHb8= Subject key identifier: 80:52:5A:54:41:56:42:1B:E4:B8:A3:18:D3:53:0F:0D:B2:9C:79:E1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104F174D0F595A0B4226E300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5686d275-7655-3c09-9ac1-b87e7f1c2b80.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 97.66.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:17:4d:0f:59:5a:0b:42:26:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=090fdcde-75f8-489a-9699-78feb9548bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:56:25:38:d1:6d:65:aa:6d:32:19:19:e0:3b: 81:ae:2b:db:ec:37:b5:69:06:e2:41:d4:69:5e:35: 91:59:d4:90:77:26:20:b3:32:a1:3b:09:e4:d1:b9: 6b:d2:9b:c8:db:be:d3:ec:0e:de:1f:4e:a1:41:22: 74:e1:1c:3b:79:4c:4b:5c:69:b5:00:27:cc:3b:a9: b6:f5:fd:8c:9d:ee:25:e8:66:14:98:9d:ae:7c:3f: 86:1d:ad:35:6c:67:8a:38:36:5f:1a:40:f5:01:a7: 40:0d:e4:1f:11:c7:ee:33:bd:10:8d:22:28:65:40: 17:db:88:2e:37:0d:a3:b6:2b:10:ee:4d:d4:4f:78: cd:c9:ab:3f:4d:e1:b1:e2:0e:8d:96:cd:49:af:e0: 40:50:6e:f1:0d:a2:5f:3a:7c:3b:b5:a8:15:d3:bc: 08:70:49:98:3a:9f:2b:00:7f:48:7e:a2:ea:a8:d7: 8f:df:41:e8:da:da:5e:d0:df:57:88:35:b9:82:5e: fc:b8:b8:5e:2b:ef:be:19:84:51:b6:d5:57:2d:19: 78:67:9a:42:6a:47:86:08:b2:07:5b:32:0d:84:41: de:4b:f0:47:36:68:b4:56:d3:da:ec:b8:4f:ef:82: 5b:35:b2:7c:ab:f1:bf:55:5f:04:08:22:25:dc:9f: d7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:52:5A:54:41:56:42:1B:E4:B8:A3:18:D3:53:0F:0D:B2:9C:79:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5686d275-7655-3c09-9ac1-b87e7f1c2b80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 97.66.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:b1:a1:79:4e:13:29:9e:f2:9e:ca:57:f4:4f:19:b9:f3:e6: cd:ad:d1:aa:48:09:e1:94:62:a5:e4:33:22:64:04:ae:e8:3c: 0a:7a:38:a7:ed:5c:e8:fb:1a:14:78:97:06:6c:27:01:26:1e: 6a:61:5f:7f:b4:74:01:5d:58:d9:db:a1:f0:99:ca:79:0e:8f: 20:9d:10:7c:ce:6a:2d:67:59:47:be:55:ef:dc:99:d1:e2:f4: 5a:e4:8d:f1:94:a7:fd:23:64:f7:a5:50:76:03:c9:10:ac:18: 09:04:ce:5c:55:8f:0d:34:57:27:ed:fa:24:48:18:d4:9f:4d: 21:8e:97:8e:a5:e7:84:a0:a3:55:4e:89:f5:68:23:8b:15:06: b5:56:76:6d:bd:d0:00:84:a6:85:12:51:7b:15:b0:d8:62:2a: d3:ac:4f:11:6f:c0:9f:13:a0:f0:71:68:07:a7:29:14:ae:dd: b7:cc:16:55:03:a0:26:c5:f3:03:2c:47:c7:31:ad:d8:bf:c8: 73:50:96:99:20:4f:97:df:1d:b1:b8:41:ce:b5:2c:e9:95:3e: 64:e1:f2:d9:9c:e2:69:e8:f0:89:b3:08:59:4b:9f:e3:97:bc: 76:71:a6:0d:0b:e4:9b:98:87:23:19:e4:3c:48:2e:53:a6:4b: 72:7d:86:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTxdND1laC0Im4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk MDkwZmRjZGUtNzVmOC00ODlhLTk2OTktNzhmZWI5NTQ4YmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlYlONFtZaptMhkZ4DuBrivb7De1aQbiQdRp XjWRWdSQdyYgszKhOwnk0blr0pvI277T7A7eH06hQSJ04Rw7eUxLXGm1ACfMO6m2 9f2Mne4l6GYUmJ2ufD+GHa01bGeKODZfGkD1AadADeQfEcfuM70QjSIoZUAX24gu Nw2jtisQ7k3UT3jNyas/TeGx4g6Nls1Jr+BAUG7xDaJfOnw7tagV07wIcEmYOp8r AH9IfqLqqNeP30Ho2tpe0N9XiDW5gl78uLheK+++GYRRttVXLRl4Z5pCakeGCLIH WzINhEHeS/BHNmi0VtPa7LhP74JbNbJ8q/G/VV8ECCIl3J/XSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBSWlRBVkIb5LijGNNTDw2ynHnhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTY4NmQyNzUtNzY1NS0z YzA5LTlhYzEtYjg3ZTdmMWMyYjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUL/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqxoXlOEyme8p7KV/RPGbnz5s2t0apICeGUYqXkMyJkBK7oPAp6OKft XOj7GhR4lwZsJwEmHmphX3+0dAFdWNnbofCZynkOjyCdEHzOai1nWUe+Ve/cmdHi 9FrkjfGUp/0jZPelUHYDyRCsGAkEzlxVjw00Vyft+iRIGNSfTSGOl46l54Sgo1VO ifVoI4sVBrVWdm290ACEpoUSUXsVsNhiKtOsTxFvwJ8ToPBxaAenKRSu3bfMFlUD oCbF8wMsR8cxrdi/yHNQlpkgT5ffHbG4Qc61LOmVPmTh8tmc4mno8ImzCFlLn+OX vHZxpg0L5JuYhyMZ5DxILlOmS3J9hts= -----END CERTIFICATE-----Generated at Sat Jun 13 19:14:28 2026 by rpki-client